Privacy Policy

The short version

• You own your uploads. We don't sell them, and we don't use them to train foundation models.
• We collect the minimum needed to run the product — account info, your material, and how you interact with it.
• We use encryption in transit (TLS 1.2+) and at rest (AES-256).
• You can export or delete your data at any time from Settings.

What we collect

Account data. Your name, email, and password hash. If you sign in with Google, we receive the profile fields Google shares (name, email, avatar).

Uploaded material. Any files, notes, or URLs you add to a StudyPod. This includes the extracted text and any generated notes, cards, and quizzes.

Usage data. Which topics you studied, quiz results, flashcard confidence, and chat interactions. We use these signals to compute mastery and drive adaptive study.

Device data. Standard server logs — IP, user agent, timestamps — retained for 30 days for security.

How we use it

• To operate StudyPod — generate notes, run quizzes, compute mastery, deliver adaptive sessions.
• To keep the service secure and detect abuse.
• To improve the product, using aggregated, de-identified analytics.
• To send you transactional email (receipts, security alerts, and notifications you turned on).

What we don't do

• We don't sell your data. Ever.
• We don't use your material to train foundation models.
• We don't run behavioral ads on the platform.
• We don't hand data to third parties beyond the sub-processors listed in our Trust page.

Sub-processors

We use a small set of well-known vendors to host, process, and secure the service. The current list is on our Trust page, along with what each vendor does.

Your rights

You can export all of your StudyPod data as JSON from Settings, and you can delete your account and all associated data with one click. Deletions propagate within 30 days across all systems, including backups. If you're covered by GDPR, CCPA, or similar law, you can also request a copy of your data by emailing main@studypod.net.

Children

New accounts go through a neutral age check. People under 13 cannot create their own account. They can use StudyPod only when a school authorizes it for class (under our Student Data Privacy Agreement), or when a parent sets up a family account. We collect only what is needed for learning, never use children's data for ads, and parents can review, export, correct or delete their child's data by contacting us or their school.

School records (FERPA)

When a school uses StudyPod, we act as a school official under the school's control. Parents and eligible students can download records from Settings → Data & privacy and request corrections there; we pass those requests to the school and respond within 30 days.

Contact

Privacy questions: main@studypod.net. Data protection officer: main@studypod.net.